For me the daemon should restrict every way of running a program even if it's executable or .desktop. I don't want to have only restrict the "UI" part because some smarter children can figure out how to run a program and just cheat the system.
For me the daemon should restrict every way of running a program even if it's executable or .desktop. I don't want to have only restrict the "UI" part because some smarter children can figure out how to run a program and just cheat the system.